UK users are increasingly meeting age checks on adult sites that previously used a simple “I am over 18” button. Here is what changed, what is expected of platforms, and — the part that matters most — what you should be willing to hand over.
What changed
The Online Safety Act placed duties on services that publish or host pornographic content accessible to UK users, with Ofcom as the regulator. The central expectation is “highly effective age assurance” — meaningfully stronger than a self-declared checkbox, which is now regarded as insufficient on its own.
Platforms have responded in three ways: implement checks, restrict UK access entirely, or continue as before and carry the enforcement risk. All three are visible across the adult web right now, which is why availability and entry flows can change without notice.
The methods you will encounter
| Method | What it involves | Privacy exposure |
|---|---|---|
| Facial age estimation | A selfie analysed for approximate age | Moderate — depends entirely on whether the image is retained |
| Photo ID check | Passport or driving licence uploaded | High — the most sensitive option |
| Credit card check | Card details used as an age proxy | High — and never appropriate on a free service |
| Mobile network check | Your operator confirms the line is age-verified | Low — no documents change hands |
| Reusable digital ID | A third-party provider vouches for you | Low to moderate — the site sees a yes, not your documents |
The rule we would apply
Do not upload identity documents to any site you would not also trust with your email password.
There is a real difference between a check handled by a recognised third-party provider that returns only a yes-or-no to the site, and a site collecting your passport into its own database. The first is a reasonable trade. The second concentrates exactly the kind of data that makes a breach devastating. If you cannot tell which is happening from the page in front of you, treat that uncertainty as the answer and walk away.
Questions worth asking before you verify
- Who is performing the check — the site, or a named third party?
- Is the image or document deleted after verification, and does the page say so?
- Is there a privacy policy that specifically covers the verification data?
- Is the connection secure and the domain the one you expect?
What this does not change
Accessing legal adult content as an adult in the UK remains lawful. The duties created by the Act sit on services, not on adult users. Two things stay unlawful regardless of any verification: content involving minors, and content that is criminal to possess under existing law.
The scam angle
Predictably, “age verification” has become a phishing pretext. A page that asks for card details to “confirm you are 18” on a free service is not performing age assurance — it is collecting card details. Free portals have no legitimate reason to take payment information at all. Our scam checklist covers the pattern.
The practical position
Expect more checks, expect them to change, and be more willing to leave a site than to hand over a document. Where a legitimate third-party provider is doing the work, verification is a reasonable step. Where a site wants your passport in its own database, the sensible response is to close the tab.
Where to go next
This article is part of our Gamcore Guide — the full reference on how the platform works, whether it is safe, and what the alternatives are. For everything else we publish, start at Gamcore UK.
18+ only. Gamcore UK is an independent publication and is not affiliated with, endorsed by, or operated by any platform we cover. Written and reviewed by the Gamcore UK editorial team.
